Microsoft Moves Towards Password-Free Future for New Accounts
Microsoft is streamlining its sign-in experience by making password-free authentication the default for new accounts. Starting May 1, 2025, users creating new Microsoft accounts will no longer be prompted to set up a traditional password during the registration process. Instead, they’ll be encouraged to use more secure alternatives like passkeys, which utilize face, fingerprint, or PIN authentication.
)
This change is part of Microsoft’s broader effort to simplify and enhance its authentication systems. The company has introduced a refreshed visual design for its sign-in and sign-up processes earlier this year, focusing on guiding users towards passwordless options. Existing users also have the option to switch to passwordless sign-in by removing their passwords through their account settings.
What are Passkeys?
A passkey is a cryptographic alternative to traditional passwords. When a user creates a passkey, two keys are generated: a public key stored by Microsoft, and a private key securely stored on the user’s device. Authentication is then performed using the device’s built-in security features, such as facial recognition or fingerprint scanning. Passkeys are based on the WebAuthn standard and are designed to be compatible across different devices.
Enhanced Sign-in Experience
Microsoft is also implementing a smarter sign-in experience that automatically selects the most secure authentication method available for a user’s account. For instance, if a user has both a password and a one-time code configured, they’ll be prompted to use the one-time code. After signing in, users will be encouraged to enroll a passkey for future use, further reducing reliance on traditional passwords.
As more users adopt passkeys, Microsoft aims to continue reducing the use of passwords, paving the way for their eventual removal. This move aligns with the company’s vision of a more secure and streamlined authentication process.